Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
otter-sec/anchor
master @ 4d23183
13
Fixes
0
CVEs
HIGH
Peak severity
16.7%
Coverage
Highlights
Auth Bypass: 11 prior fixes. Scrutinize any change in this area.
lang: most-fixed (3 issues). Treat as high-risk during review.
13 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Duplicate mutable references to the same account during instruction validation can bypass default safety checks, leading to state corruption and validation escapes. Additionally, lack of type-safe wrappers and static owner checks can allow signature and executable program verification bypasses.
Auth Bypass: Failure to validate that the runtime program_id matches the compile-time declared program ID at execution entry points can allow arbitrary program execution spoofing.
Auth Bypass: Reading Cross-Program Invocation (CPI) return data without validating the returning program's ID allows malicious programs to spoof CPI response data.